HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Assurance IQ, LLC and USA Family Protection Insurance Services, LLC
bd_ae64acbc7be54956 · schema v1 · pii pii-v1
Full breach record for Assurance IQ, LLC and USA Family Protection Insurance Services, LLC →Assurance IQ, LLC and USA Family Protection Insurance Services, LLC disclosed that an unauthorized third party may have obtained driver's license numbers and state of issuance via an online life insurance application platform between November 2020 and April 2022. The attacker used public-facing websites to input names and addresses obtained from external sources, triggering the display of driver's license numbers. No insurance policies were issued. The company notified law enforcement, implemented preventive measures, and offered two years of identity monitoring via Kroll.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-559553
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 29, 2022
- Raw hash
- 950bcac1b273923eb0c0e0e1dbe7918f1ecf7fad24f8b9f680d7f9850be218a4
Reporting entity
- Name
- Assurance IQ, LLC and USA Family Protection Insurance Services, LLCnorm: assurance iq llc and usa family protection insurance
Victim entity
- Name
- Assurance IQ, LLC and USA Family Protection Insurance Services, LLCnorm: assurance iq llc and usa family protection insurance
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified law enforcement of this incident
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.